Not sure if the specific diveice which you want to block is wired or wireless. If it is wireless, you can just simple black-list as per prevous comments. if we are talking about any wired deivce that you dont want to access the wireless network.
i would recomment to just put the ACL on the controller uplink to drop the traffic from the device to WLAN on the controller.
Say for example by this way..
Config t
ip access-list session "block device"
any host <ip address of the device> any deny
any any any permit
Map this policy to controller uplink to drop the traffic. Make sure you add any any any permit is added to the below policy.
Thank you.